bostik

16 ms·

181.
by bostik 2y ago
This is an exceptionally good question to identify people who have actually used a technology for real. I've used merely the second part ("what gripes do you have about X") in interviews successfully for nearly two decades. I
182.
by bostik 2y ago
Local DNS override, and two registries. One mirroring the relevant public NPM packages as they are, and one "normal" internal one. Make the mirror registry resolvable with the same name(s) as the real, public NPM registry. Then
183.
by bostik 2y ago
I suspect it might be the smaller quantity in general. 90% of everything is crap. 90% of everything that remains is still crap. With the endless yammering cut out, there is simply a lower volume of garbage competing with your limited bandwi
184.
by bostik 2y ago
> Aren’t there many countries which are happily anti social? Yes: Finland. Purportedly the happiest country on the planet. A bilingual nation who will merrily shut up in two languages simultaneously. Whose complete lack of small-talk i
185.
by bostik 2y ago
While I don't have immediate first-person knowledge, the event and decisions were widely reported at the time. https://www.zdnet.com/article/krebs-on-security-booted-off-a... -- note the quote, in particular http
186.
by bostik 2y ago
Sure, as a business decision it must have made perfect sense at the time - Akamai had bigger (paying) customers to protect. But that doesn't make the optics around it any less terrible. The message they were telegraphing with their com
187.
by bostik 2y ago
As a testament to his effectiveness at digging out the various online scammers, Akamai "had to" boot Krebs off of their service - the criminal gangs wanted him and his website out of the picture, and directed enough DDoS volume to
188.
by bostik 2y ago
So as a third-order effect, advertising industry would immolate themselves into extinction when having ads out would immediately telegraph to everyone "I am not to be trusted, stay away"? I think I could live with that.
189.
by bostik 2y ago
You're asking the wrong question. Maybe we should be asking whether the ad industry deserves to survive if they have to (or choose to) resort to stalking and surveillance that would have made Stasi jealous. It may not be possible to do
190.
by bostik 2y ago
> This is completely irrelevant, as there's no evidence that the US uses its state intelligence apparatus to engage in industrial espionage Apart from recent and historical evidence to the contrary[0;1], one has to expect that eve
191.
by bostik 2y ago
There are recruiting agencies who have tried this method: "Use AI to match the most relevant candidates to the job spec you gave us." Spoiler alert, it doesn't work. The result is a mountain of overfitted garbage, with keywor
192.
by bostik 2y ago
The quote from Margin Call is used a lot, but the more I look at the world, the more I believe it's a naive take. There are three ways to make a living in this business: be first, be smarter, or cheat. That statement has the wrong bo
193.
by bostik 2y ago
Life imitates art: https://scifi.stackexchange.com/questions/146511/death-penal...
194.
by bostik 2y ago
> clients connected to the same homeserver should all see the same ordering Ideally, yes. In the real world you get to deal with such inconveniences as unreliable transport, slow networks, server-to-server communications, eventual cons
195.
by bostik 2y ago
> I know I can rest assured the Excel spreadsheet for my monthly and annual budget is perfectly accurate and reliable. Consider yourself lucky that your use cases are all on the happy path. There are entire categories of bugs and incon
196.
by bostik 2y ago
The logical step after that will be Mechanical Turk for remote driving.
197.
by bostik 2y ago
Storage is cheap, and the overall figures are not that outlandish. If we look at a suitable first page search result[0], and round figures up we get to about 700 GB per day. And how did I get that figure? I'm going to fold pcap overh
198.
by bostik 2y ago
Among all the software installed in a reputable Linux system, tcpdump and libpcap are some of the most battle tested pieces one can find. Wireshark has bugs, yes. Mostly in the dissectors and in the UI. But the packet capture itself is thro
199.
by bostik 2y ago
Savings accounts are a lucrative and relatively sticky offering. Many higher-rate savings accounts offer two (or more) tiers of interest, with higher rates applying to months where the customer does not withdraw or otherwise move money ou
200.
by bostik 2y ago
This particular case would be a fantastic fit for timer wheel.[0] Instead of writing a brittle implementation of "after a fixed time in the future" logic yourself, you queue the outgoing event to occur after N ticks [of granularit
201.
by bostik 2y ago
Try both. Towards the end of the Plague Years, when food prices were going up 4%-5% quarter to quarter , people were most definitely complaining that the prices were rising way too fast. Some of the prices have started to come down a bit i
202.
by bostik 2y ago
The CCC video crew has its fair share of geeks from broadcasting corporations and studio houses. Their combined institutional knowledge about live events and streaming distribution is probably in the same ballpark as that of giant global TV
203.
by bostik 2y ago
No, not arbitrage. The "insight" was that the odds offered by bookies are remarkably accurate predictors of the outcome. Averaged across a number of bookies the small variations cancel out. In other words, you can't beat the
204.
by bostik 2y ago
The same incident, because the root causes are even more messed up than just shoddy QA. Yes, the thing wasn't caught because of missing QA. What I find even worse is that the build process for their "channel files" involved
205.
by bostik 2y ago
> To avoid the cesspool effect, Bluesky should just charge publishers (anyone who wants to post) a high monthly fee So they should become a subscription-based press release distribution channel? That doesn't sound too different fr
206.
by bostik 2y ago
Yes. Solarwinds. Code checked out from the repository was not the same that was used to build the actual release. These are not high-likelyhood incidents but when they do occur, they tend to have high impact. And more recently, semantically
207.
by bostik 2y ago
So in your threat model the attacker is someone who has the resources to target you individually (plausible for high-value targets), the capability and capacity to further develop the physical field attack kit (current cost at ~11k for lab
208.
by bostik 2y ago
The attacker would have to take the targeted YubiKey physically apart to get access to the Infineon chip. Then, after performing enough successful FIDO2 challenges (ie. logins with phished credentials) they would need to put the device back
209.
by bostik 2y ago
I tend to cheat a little. Parboil until the surface layer is soft, pour into a large colander. Allow to steam off for a while. Toss and turn to get all surfaces properly roughed up, move into a large (steel) bowl. Add 3-4 tablespoons of goo
210.
by bostik 2y ago
Money Stuff is a weathervane and a lightning rod. Things show up in Matt's writing sometimes months before they make a splash in the rest of the world. I work adjacent to finance, but I'd read Money Stuff even without that link. I

More ›